This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/sUUUlDmsoS6747nfIf4AnZev3Mw.roa File: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (raw, json) Hash identifier: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk= Subject key identifier: B1:45:14:94:39:AC:A1:2E:BB:E3:B9:DF:21:FE:00:9D:97:AF:DC:CC Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b Certificate serial: 019B79EC86ADEEC2594D725D33E39222DB60 Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/sUUUlDmsoS6747nfIf4AnZev3Mw.roa Signing time: Thu 01 Jan 2026 14:18:22 +0000 ROA not before: Thu 01 Jan 2026 14:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.9.128.0/24 maxlen: 24 45.9.129.0/24 maxlen: 24 45.9.130.0/24 maxlen: 24 45.9.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:86:ad:ee:c2:59:4d:72:5d:33:e3:92:22:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b Validity Not Before: Jan 1 14:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b145149439aca12ebbe3b9df21fe009d97afdccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:93:21:0c:2b:0b:35:03:98:8a:f9:32:a9: 75:1c:2d:bc:d6:b8:03:ef:85:12:b7:eb:f3:70:bd: 58:6a:92:81:a6:73:56:5f:bf:26:2d:68:f8:90:eb: 3b:f7:a7:fb:35:db:8b:19:a2:14:da:09:c5:fd:73: b3:4d:16:e5:d9:0f:16:db:00:74:32:b6:ef:f3:15: ed:fc:ed:6d:88:3d:5b:86:02:52:99:f4:af:8f:e5: f5:14:34:25:d1:57:6b:39:34:4c:86:41:bf:1d:d5: 84:1a:a4:c0:57:75:8d:aa:0d:45:2a:60:a2:2a:c7: 59:ad:e9:3d:0d:fc:f9:0b:4c:cb:0b:4d:ad:c2:e6: c9:d3:48:95:90:fc:9d:3f:f5:e3:6f:ea:7a:c4:68: 0b:ea:f0:c9:85:04:f1:3d:99:84:85:f1:36:5e:72: 99:24:22:a8:30:a6:34:83:51:73:1e:f5:6f:b3:e7: 3b:ce:65:3c:99:a2:c5:b0:76:6c:48:89:ea:91:34: 29:65:e9:1c:2a:d5:0d:65:55:fd:96:95:ee:34:35: d0:51:e6:ba:90:54:4f:13:a4:c3:65:8f:5b:cc:1a: fb:64:ad:2c:12:bc:17:df:d9:ae:03:99:1a:ff:b9: d4:46:6a:e2:70:ea:d6:93:35:0b:47:f8:41:63:af: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:45:14:94:39:AC:A1:2E:BB:E3:B9:DF:21:FE:00:9D:97:AF:DC:CC X509v3 Authority Key Identifier: keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/sUUUlDmsoS6747nfIf4AnZev3Mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.128.0/22 Signature Algorithm: sha256WithRSAEncryption 36:01:ff:52:6a:2a:d4:b0:ac:71:6a:1e:71:99:2a:7a:a4:96: ad:08:5a:a9:69:2e:a1:93:db:61:55:1f:c6:04:f5:fa:dd:a9: af:87:80:d4:23:de:27:da:ef:37:51:12:71:9a:4b:a3:44:02: 82:a4:69:6c:57:9f:56:1a:3a:ec:91:0a:e4:88:70:a0:13:39: 79:05:c9:fb:5f:cc:10:92:18:37:ff:1e:70:33:56:83:06:1b: ee:38:34:a1:fc:78:7b:a6:ae:b1:9a:f4:af:7c:29:5e:6e:d9: ba:a6:55:af:d6:58:b7:b8:30:4c:54:f9:12:42:52:4f:e0:31: af:5b:2f:81:df:6c:bc:8b:9c:34:16:54:e4:77:df:94:ae:f4: f3:41:c2:4e:ac:38:21:51:12:52:90:d2:50:9e:d6:2a:5a:db: cf:61:f8:70:98:c5:ac:d8:3a:f9:31:8e:e9:74:eb:6e:68:0c: f2:0b:ff:7f:3b:d1:ec:9d:83:c0:47:ec:6c:2b:55:c7:bc:9e: db:20:8e:ab:2e:32:14:9b:24:bd:1c:54:d2:3a:a1:10:b0:55: e5:94:b5:5a:ad:96:f3:e2:02:7c:c4:ae:17:71:b3:76:8f:1d: df:12:ba:aa:12:b5:8c:97:65:6c:6a:8a:37:6c:4f:48:fb:d9: c7:8c:cf:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Iat7sJZTXJdM+OSIttgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Y2NkZjY5NTk4OTM3OWYzOTg0YzE4NjQxZTkzN2ViYjY4 MjI1OWIwHhcNMjYwMTAxMTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTQ1MTQ5NDM5YWNhMTJlYmJlM2I5ZGYyMWZlMDA5ZDk3YWZkY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BqTIQwrCzUDmIr5Mql1HC281rgD 74USt+vzcL1YapKBpnNWX78mLWj4kOs796f7NduLGaIU2gnF/XOzTRbl2Q8W2wB0 Mrbv8xXt/O1tiD1bhgJSmfSvj+X1FDQl0VdrOTRMhkG/HdWEGqTAV3WNqg1FKmCi KsdZrek9Dfz5C0zLC02twubJ00iVkPydP/Xjb+p6xGgL6vDJhQTxPZmEhfE2XnKZ JCKoMKY0g1FzHvVvs+c7zmU8maLFsHZsSInqkTQpZekcKtUNZVX9lpXuNDXQUea6 kFRPE6TDZY9bzBr7ZK0sErwX39muA5ka/7nURmricOrWkzULR/hBY6/jZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFFFJQ5rKEuu+O53yH+AJ2Xr9zMMB8GA1UdIwQY MBaAFOnM32lZiTefOYTBhkHpN+u2giWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYt YjM1ZjZhN2I3MjA4LzEvc1VVVWxEbXNvUzY3NDduZklmNEFuWmV2M013LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYtYjM1ZjZhN2I3MjA4 LzEvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQmAMA0G CSqGSIb3DQEBCwUAA4IBAQA2Af9SairUsKxxah5xmSp6pJatCFqpaS6hk9thVR/G BPX63amvh4DUI94n2u83URJxmkujRAKCpGlsV59WGjrskQrkiHCgEzl5Bcn7X8wQ khg3/x5wM1aDBhvuODSh/Hh7pq6xmvSvfClebtm6plWv1li3uDBMVPkSQlJP4DGv Wy+B32y8i5w0FlTkd9+UrvTzQcJOrDghURJSkNJQntYqWtvPYfhwmMWs2Dr5MY7p dOtuaAzyC/9/O9HsnYPAR+xsK1XHvJ7bII6rLjIUmyS9HFTSOqEQsFXllLVarZbz 4gJ8xK4XcbN2jx3fErqqErWMl2Vsaoo3bE9I+9nHjM/z -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:54 2026 by rpki-client